Privacy Policy for FIT Zoho Sync
Effective Date: January 1, 2026 • Last Updated: October 2026 • Application Slug: zoho-sync
1. Introduction & Scope
This Privacy Policy describes how FIT Apps ("we", "us", or "our") collects, processes, stores, and protects merchant and customer data when you install or use the FIT Zoho Sync application on your e-commerce store.
2. API Scopes & Information We Access
To deliver its core functionality (2-way real-time Zoho Inventory & Books sync. 3-click setup.), FIT Zoho Sync requests only the minimum required API permissions:
read_products- Used strictly to synchronize and process store records configured by the merchant inside FIT Zoho Sync.write_products- Used strictly to synchronize and process store records configured by the merchant inside FIT Zoho Sync.read_inventory- Used strictly to synchronize and process store records configured by the merchant inside FIT Zoho Sync.write_inventory- Used strictly to synchronize and process store records configured by the merchant inside FIT Zoho Sync.read_orders- Used strictly to synchronize and process store records configured by the merchant inside FIT Zoho Sync.write_orders- Used strictly to synchronize and process store records configured by the merchant inside FIT Zoho Sync.read_locations- Used strictly to synchronize and process store records configured by the merchant inside FIT Zoho Sync.
3. Mandatory GDPR & Privacy Webhooks
FIT Zoho Sync implements and verifies all mandatory privacy webhooks using HMAC-SHA256 cryptographic validation:
customers/data_request: Exports all stored records associated with the requested customer ID within 72 hours.customers/redact: Permanently anonymizes and purges personal customer data upon request.shop/redact: Automatically deletes all store configuration tokens, logs, and cached metadata within 48 hours of app uninstallation.
4. Infrastructure Security & Data Retention
All data transmitted by FIT Zoho Sync is encrypted in transit via TLS 1.3 and encrypted at rest (AES-256) on Google Cloud Run infrastructure. We never sell, rent, or monetize merchant or buyer data.
5. Data Protection Officer & Contact
For privacy inquiries, data subject access requests (DSAR), or security audits regarding FIT Zoho Sync, contact our Data Protection Officer at support@fit-apps.dev.